Known vulnerabilities in Craft CMS - page 8

Software: Craft CMS
Software CPE: cpe:2.3:a:pixel_and_tonic:craft_cms:*:*:*:*:*:*:*:*
Total vulnerabilities: 142
Public exploits: 13
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Craft CMS Craft CMS is affected by 142 known vulnerabilities: 1 critical, 13 high, 54 medium, 74 low Critical High Medium Low

Vulnerabilities (142)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152999 - Missing Authorization
CVE-2026-109306
CWE-862 Medium
No
No
5.10.14 30.09.2026 SB20260930107
#VU152993 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-109307
CWE-79 Low
No
No
5.10.14 30.09.2026 SB20260930107


Showing elements 141 - 160 out of 142